Privacy Policy

01 Who is responsible

Luna Luce (“we”, “us”, “our”) is the studio that operates lunaluce.studio and is responsible for the personal data described here. You can reach us any time at hello@lunaluce.studio.

02 What we collect

What you give us

When you send a brief or write to us, we collect what you choose to share, which may include:

• your name, email address, and phone or WhatsApp number;
• your company or agency name, and a website or portfolio link;
• the property location, a rough count of your photos, and how many films you need;
• a link to your photographs, if you provide one (for example a Drive, Dropbox, or listing URL);
• the notes and any details you type into the brief.

The brief form does not upload your photographs; you share them by link or by a method we agree later. When we produce a film, we hold the material you send us for that purpose.

What we receive automatically

Like any website, our host records basic technical data such as your IP address, browser type, and the pages requested, in server logs used to run and secure the site. We do not currently use advertising or third-party analytics cookies.

03 How we use it

• to reply to your brief and prepare a plan and price;
• to produce, revise, and deliver your film;
• to keep in touch about your project and answer your questions;
• to run, secure, and improve the website.

Where the law requires a legal basis (for example under the EU/UK GDPR), we rely on taking steps at your request and performing our contract with you, on our legitimate interest in running the studio and responding to enquiries, and on your consent where it applies.

04 Who helps us process it

We do not sell or rent your data. We share it only with the service providers that make the site work, each acting on our behalf:

• Web3Forms receives your brief and emails it to our studio inbox. Your details pass through their service to reach us.
• Vercel hosts the website and keeps the server logs described above.
• Amazon CloudFront delivers the video on the site as a content-delivery network.
• Google Fonts serves the typefaces the site uses, which involves a request to Google's servers from your browser.

We may also disclose data if the law requires it, or to protect our rights. If our studio is ever transferred to new ownership, data may pass with it under this same policy.

05 Cookies and local storage

We do not use tracking or advertising cookies. The site uses a small amount of local storage in your browser only to run the page smoothly, such as remembering that you arrived through the opening transition. This never leaves your device and is not used to track you.

06 How long we keep it

We keep your brief and project material for as long as needed to work with you and for a reasonable period afterward, so we can answer follow-ups and meet our legal and accounting obligations. When it is no longer needed, we delete or anonymise it. You can ask us to delete your data sooner (see your rights below).

07 Your rights

Because we work with people around the world, the exact rights you have depend on where you live. Wherever you are, you can ask us to access the data we hold about you, to correct it, to delete it, to object to or restrict how we use it, and to receive a copy of it.

These rights are recognised under laws such as India's Digital Personal Data Protection Act, the EU and UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), among others. If you are in California, note that we do not sell or share your personal information, and we will not treat you differently for exercising your rights. If you are in the EU or UK, you may also lodge a complaint with your local data-protection authority.

To exercise any right, write to hello@lunaluce.studio. We will respond within the time the applicable law allows.

08 Security and international transfers

We take reasonable measures to protect your data, and we work only with reputable providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

We serve clients worldwide, and our providers operate globally, so your data may be stored or processed in countries other than your own, including outside the EU, the UK, or India. Where the law requires it, these transfers are covered by appropriate safeguards, such as the standard contractual clauses that our providers use.

09 Children

The site and service are intended for businesses and adults. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

10 Changes to this policy

We may update this policy as the site or the law changes. The current version is always the one posted here, with the date it was last updated shown above. Significant changes will be reflected on this page.